OpenStack Identity (keystone)

  1. Bug #1779205
  2. Comment #29

Comment 29 for bug 1779205

Revision history for this message
Morgan Fainberg (mdrnstm) wrote : Re: GET /v3/OS-FEDERATION/projects leaks project information

Note: My above assertion is incorrect. as this requires a federated token. OS-FEDERATION as a URL is not something that can be disabled. However, if the user is unable to get a federated token (no federation endpoint, aka shibboleth via apache) is setup, the OS-FEDERATION code raises a 500 error (as described by kristi).

We should be more specific in that this only impacts federated auth tokens to avoid confusion (like I just had) regarding what is meant by OS-FEDERATION